Difference between revisions of "Firewall Logs"

From Atomicorp Wiki
Jump to: navigation, search
(Created page with "= DROP_ASL_GSCAN = ASL has detected a potential banner grab portscan. = DROP_ASL_CNSCAN = ASL has detected and blocked a connect() portscan. = DROP_ASL_SSCAN = ASL has de...")
 
m
Line 1: Line 1:
= DROP_ASL_GSCAN =
+
= Kernel firewall log headers =
  
 +
== ASL_AR_DROP ==
 +
 +
ASL has blocked packets from an IP that was automatically shunned by ASL.
 +
 +
 +
 +
== DROP_ASL_GSCAN ==
 
ASL has detected a potential banner grab portscan.
 
ASL has detected a potential banner grab portscan.
  
= DROP_ASL_CNSCAN =
+
== DROP_ASL_CNSCAN ==
  
 
ASL has detected and blocked a connect() portscan.
 
ASL has detected and blocked a connect() portscan.
  
= DROP_ASL_SSCAN =
+
== DROP_ASL_SSCAN ==
 
+
 
ASL has detected and blocked a potential SYN portscan.
 
ASL has detected and blocked a potential SYN portscan.
  
= DROP_ASL_STSCAN =
+
== DROP_ASL_STSCAN ==
  
 
ASL has detected and blocked a stealth portscan.
 
ASL has detected and blocked a stealth portscan.
  
= DROP_ASL_RATE =
+
== DROP_ASL_RATE ==
  
 
The [[Ratelimit]] you configured for this port have been exceeded.  ASL does not set any rate limits by default.
 
The [[Ratelimit]] you configured for this port have been exceeded.  ASL does not set any rate limits by default.
  
= DROP_ASL_MSS =
+
== DROP_ASL_MSS ==
  
 
ASL has detected a packet that is too small to be valid.
 
ASL has detected a packet that is too small to be valid.
  
= DROP_ASL_INPUT =
+
== DROP_ASL_INPUT ==
 
+
 
ASL has dropped a packet because you have configured it to do this.  ASL does not block connections to any ports by default.
 
ASL has dropped a packet because you have configured it to do this.  ASL does not block connections to any ports by default.

Revision as of 18:02, 15 March 2014

Contents

Kernel firewall log headers

ASL_AR_DROP

ASL has blocked packets from an IP that was automatically shunned by ASL.


DROP_ASL_GSCAN

ASL has detected a potential banner grab portscan.

DROP_ASL_CNSCAN

ASL has detected and blocked a connect() portscan.

DROP_ASL_SSCAN

ASL has detected and blocked a potential SYN portscan.

DROP_ASL_STSCAN

ASL has detected and blocked a stealth portscan.

DROP_ASL_RATE

The Ratelimit you configured for this port have been exceeded. ASL does not set any rate limits by default.

DROP_ASL_MSS

ASL has detected a packet that is too small to be valid.

DROP_ASL_INPUT

ASL has dropped a packet because you have configured it to do this. ASL does not block connections to any ports by default.

Personal tools